Compliance for AI systems in production — screen every AI-agent action through a 4-gate firewall before it runs, with an OCSF-native audit trail mapped to EU AI Act / SOC 2 / NIST / HIPAA.
Setup
Choose your client, copy the config, then fill in any required environment variables.
Local
claude mcp add a2a-trustgate --env A2A_API_KEY='<A2A_API_KEY>' -- npx -y a2a-trustgate~/.codex/config.toml
[mcp_servers.a2a-trustgate]
command = "npx"
args = ["-y", "a2a-trustgate"]
env = { A2A_API_KEY = "<A2A_API_KEY>" }
# codex mcp add a2a-trustgate --env A2A_API_KEY='<A2A_API_KEY>' -- npx -y a2a-trustgate~/.cursor/mcp.json
{
"mcpServers": {
"a2a-trustgate": {
"command": "npx",
"args": [
"-y",
"a2a-trustgate"
],
"env": {
"A2A_API_KEY": "<A2A_API_KEY>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"a2a-trustgate": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"a2a-trustgate"
],
"env": {
"A2A_API_KEY": "<A2A_API_KEY>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"a2a-trustgate": {
"command": "npx",
"args": [
"-y",
"a2a-trustgate"
],
"env": {
"A2A_API_KEY": "<A2A_API_KEY>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"a2a-trustgate": {
"command": "npx",
"args": [
"-y",
"a2a-trustgate"
],
"env": {
"A2A_API_KEY": "<A2A_API_KEY>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"a2a-trustgate": {
"command": "npx",
"args": [
"-y",
"a2a-trustgate"
],
"env": {
"A2A_API_KEY": "<A2A_API_KEY>"
}
}
}
}Remote
claude mcp add --transport sse a2a-trustgate https://mcp.a2ainfrastructure.com/sse --header 'Authorization: <AUTHORIZATION>'~/.codex/config.toml
# Codex has no SSE transport: bridged through mcp-remote
[mcp_servers.a2a-trustgate]
command = "npx"
args = ["-y", "mcp-remote", "https://mcp.a2ainfrastructure.com/sse", "--header", "Authorization:<AUTHORIZATION>"]~/.cursor/mcp.json
{
"mcpServers": {
"a2a-trustgate": {
"url": "https://mcp.a2ainfrastructure.com/sse",
"headers": {
"Authorization": "<AUTHORIZATION>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"a2a-trustgate": {
"type": "sse",
"url": "https://mcp.a2ainfrastructure.com/sse",
"headers": {
"Authorization": "<AUTHORIZATION>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"a2a-trustgate": {
"url": "https://mcp.a2ainfrastructure.com/sse",
"headers": {
"Authorization": "<AUTHORIZATION>"
}
}
}
}claude_desktop_config.json · Customize › Connectors › Add custom connector
{
"mcpServers": {
"a2a-trustgate": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://mcp.a2ainfrastructure.com/sse",
"--header",
"Authorization:<AUTHORIZATION>"
]
}
}
}.trae/mcp.json
{
"mcpServers": {
"a2a-trustgate": {
"url": "https://mcp.a2ainfrastructure.com/sse",
"headers": {
"Authorization": "<AUTHORIZATION>"
}
}
}
}Environment variables
A2A_API_KEY
Replace the placeholders with your own credentials and keep them out of version control.